Overview

overview

6

Static

static

6

RogersAssi...1).zip

windows10-2004-x64

1

Payload/pr...ts.pdf

windows10-2004-x64

1

Payload/pr...faults

windows10-2004-x64

1

Payload/pr...orking

windows10-2004-x64

1

Payload/pr...er_3_0

windows10-2004-x64

1

Payload/pr...erjack

windows10-2004-x64

1

Payload/pr...Button

windows10-2004-x64

1

Payload/pr...matter

windows10-2004-x64

1

Payload/pr...lytics

windows10-2004-x64

1

Payload/pr...zation

windows10-2004-x64

1

Payload/pr...Mantle

windows10-2004-x64

1

Payload/pr...PURLRQ

windows10-2004-x64

1

Payload/pr...bility

windows10-2004-x64

1

Payload/pr...ponent

windows10-2004-x64

1

Payload/pr...ources

windows10-2004-x64

1

Payload/pr...ychain

windows10-2004-x64

1

Payload/pr...roller

windows10-2004-x64

1

Payload/pr...idecar

windows10-2004-x64

1

Payload/pr...oiding

windows10-2004-x64

1

Payload/pr...holder

windows10-2004-x64

1

Payload/pr...orders

windows10-2004-x64

1

Payload/pr...xtobjc

windows10-2004-x64

1

Payload/pr....dylib

windows10-2004-x64

3

Payload/pr....dylib

windows10-2004-x64

3

Payload/pr....dylib

windows10-2004-x64

3

Payload/pr....dylib

windows10-2004-x64

3

Payload/pr....dylib

windows10-2004-x64

3

Payload/pr...n.html

windows10-2004-x64

1

Payload/pr...r.html

windows10-2004-x64

1

Payload/pr...min.js

windows10-2004-x64

1

Payload/pr...rprise

windows10-2004-x64

1

Payload/pr...min.js

windows10-2004-x64

1

Resubmissions

04-10-2023 20:49

231004-zl42gaha58 6

04-10-2023 20:43

231004-zhtfkaha32 6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RogersAssist-Version 1.17.0 (1).ipa

  • Size

    5.6MB

  • Sample

    231004-zhtfkaha32

  • MD5

    37289d4744471ad3cfe6d10a15490309

  • SHA1

    546af23f8049e5df9b9915644442dae055f57418

  • SHA256

    8bd66434916135d0be06efbb0a9b029371781e9acdfc9d7ecb15eda91e2a3911

  • SHA512

    eed87f267e77a05800974a68a2eeb766b7d11a2eacfa7edb9e456bcec4f0699fa0548d3e9f229a790d20f5abd3257822c4c14cba8b786c5e77157f31ea67e291

  • SSDEEP

    98304:vTcCcXUgaSI3eWFcuITP3Vgpiox60Zy2rdbNUYsQyJ8awK/xnqf+09aVymw3qS:vwb3aSkcuM+ioM2ZbNUYwaawKJnF0cVw

Score
6/10
evasionpdf

Malware Config

Targets

    • Target

      RogersAssist-Version 1.17.0 (1).ipa

    • Size

      5.6MB

    • MD5

      37289d4744471ad3cfe6d10a15490309

    • SHA1

      546af23f8049e5df9b9915644442dae055f57418

    • SHA256

      8bd66434916135d0be06efbb0a9b029371781e9acdfc9d7ecb15eda91e2a3911

    • SHA512

      eed87f267e77a05800974a68a2eeb766b7d11a2eacfa7edb9e456bcec4f0699fa0548d3e9f229a790d20f5abd3257822c4c14cba8b786c5e77157f31ea67e291

    • SSDEEP

      98304:vTcCcXUgaSI3eWFcuITP3Vgpiox60Zy2rdbNUYsQyJ8awK/xnqf+09aVymw3qS:vwb3aSkcuM+ioM2ZbNUYwaawKJnF0cVw

    Score
    1/10
    behavioral1

    • Target

      Payload/prod-rogers-advocate-enterprise.app/Assets.car

    • Size

      1.2MB

    • MD5

      fbde8c4a9c4ec33d4cd88f5fd117c07c

    • SHA1

      3be3b93ab71473e005df61f9635efe2511d281fa

    • SHA256

      7fe3052caefe668082a857fffbf36e78984410b8b95863e26e5dd9b9e176c02f

    • SHA512

      831699b64fe9f101c94b2ddd26fb7409971de68b8129b4ca876ed70afe17caa1175893c1735acb3c7ddc100dc6d4ba00d2384c9b841658bedab239fd7c36ba25

    • SSDEEP

      24576:YxFyve5AQnFRF5P0CpCAONQ/UbAd83vKrWrCEddmR:Y8e5AQnrXs8qNQ/UbAd83SKrCOdmR

    Score
    1/10
    behavioral2

    • Target

      Payload/prod-rogers-advocate-enterprise.app/Frameworks/ADVUserDefaults.framework/ADVUserDefaults

    • Size

      121KB

    • MD5

      8e1d1a644d9c73626dd58cdf80e2ebb3

    • SHA1

      34a299910ff4fcfed56491a18c7ed48cc35bd9af

    • SHA256

      322720f69b5248afc01ddd6b324f1ed17c56dffc8f1deb855ac857dcf334f834

    • SHA512

      93f22a1841d1ee903bc607312aadf74ae7ed1cf58b7f00bcf15e5c04881c315692986b1a3bbd8fdab6f1a0ef97f17a095a466ba43af93a16a43c1b8a4ddcdad2

    • SSDEEP

      1536:GMze4mo2kAKLMV6i5kzqNGEsHVzG4RPYsper7eEMjc:H9eryEMj

    Score
    1/10
    behavioral3

    • Target

      Payload/prod-rogers-advocate-enterprise.app/Frameworks/AFNetworking.framework/AFNetworking

    • Size

      522KB

    • MD5

      0024cd8d988337131976737672a74bbb

    • SHA1

      810a1de04cee5a7576063a3618f3a77206bf241a

    • SHA256

      973ac73b17496415ed4a979bc9aaac02e41ffa3c9e03a51e6a5fade35d83a3bc

    • SHA512

      4666e04903d7b7ac23cabe5a3aee9c2134df2fd457b0478b5cb74876d29f15dff98c0f90dbe735540c0badf1cdef94b6ce60b8ccd68254a427579395d29e3c33

    • SSDEEP

      6144:UDLjnxgrd/NdRMN9vbE1LDBRwLZXu0fLogefLZXu4:UDLDgd/NdmpE1pRQU

    Score
    1/10
    behavioral4

    • Target

      Payload/prod-rogers-advocate-enterprise.app/Frameworks/ActionSheetPicker_3_0.framework/ActionSheetPicker_3_0

    • Size

      238KB

    • MD5

      33c1dfe0a5c5be8c856528cad8a6d9d7

    • SHA1

      1ae23b6c28ca5f0b53c6d76b440d6ac7ac803275

    • SHA256

      92c326a8df81b2ec73bfe78c7753e23e462813503ff8969939a046629b75033f

    • SHA512

      3914a9d2ff5d0d0c1c60274855b28fb40df2460a0eeac916ef51e71a4ae00bf0d944f1412c01dec7fedd867d806a6c8561fcaa91d5002de372ac59b26ce7ac81

    • SSDEEP

      3072:u9A+GByUsN0QBTkAY//plLFoI7cFPd58Eoa7E2+4aMTDyM/ETw+k8ESsAYOk+A7J:3tChwiI

    Score
    1/10
    behavioral5

    • Target

      Payload/prod-rogers-advocate-enterprise.app/Frameworks/CocoaLumberjack.framework/CocoaLumberjack

    • Size

      335KB

    • MD5

      15995315eac517657a1f119f3f467807

    • SHA1

      659e8272f8273641517e66fff7f58919d1cbcaab

    • SHA256

      cc11f26002688c5e3dc1bdbf4b6a07333662efe3330208774bb019d151461113

    • SHA512

      5bc3ac850273b2a3b4947fbe08069481ecca6704980dc42e4518ab1734e7082ddab64fdc6258d8b269b77ac82c072d0781396edaa5a4a5ab05583689388d4422

    • SSDEEP

      3072:pOxGBT8L/rk0iIGp7mH/axvRzBN3VrlU:OtiI0J3

    Score
    1/10
    behavioral6

    • Target

      Payload/prod-rogers-advocate-enterprise.app/Frameworks/DLRadioButton.framework/DLRadioButton

    • Size

      115KB

    • MD5

      08e4e9796cd41dd74f69f9fa4a77d308

    • SHA1

      93d998ca5487f071ea915722e1d442e7651b1edc

    • SHA256

      11b993e5a2e9de7fd55f83dcaca9f7a2d0ad9c4de48a3968c1bd40a38aa6114a

    • SHA512

      35a04551c0b357398a23a716d7566b529fb35ae9d3fa86e0e930548b241fe593ea0050a2031703c08cdda6fe1926c4b7d8ee310187797e99be90e43b2ddedc60

    • SSDEEP

      1536:teR697VH2Uh0/yPK0sH711myK0M4jzoHcuJQuNya2:u6x0bIJQj

    Score
    1/10
    behavioral7

    • Target

      Payload/prod-rogers-advocate-enterprise.app/Frameworks/ECPhoneNumberFormatter.framework/ECPhoneNumberFormatter

    • Size

      89KB

    • MD5

      288bd05873342586759d1382cb058470

    • SHA1

      bf29b9fcd4c45c8a5e6964f3b75810d6f6576e1d

    • SHA256

      e7ebeb503c737de2257f4c29d0f1b988c3c37c589120cf784d2384a19fab50b7

    • SHA512

      5509be4ccff91d8391f9d39f578b021390a311ca047c53fe147cbd08386e0a02b1e2386b008ed50138661cd430bd4b10682f320333bb4bc3019de4295939fcf5

    • SSDEEP

      1536:+8pTbkWBqT4j7EvZB68CaIGThB3ZlHZHl2MdHl2C:+8v7gxHl2MdHl2

    Score
    1/10
    behavioral8

    • Target

      Payload/prod-rogers-advocate-enterprise.app/Frameworks/Localytics.framework/Localytics

    • Size

      1.7MB

    • MD5

      e6ee4c20832779a8feabebce2d548754

    • SHA1

      47bc99f95b575027c3a57cccc8be3a59567d9061

    • SHA256

      a3e49a0f15a89cafce1fa2329c65a28a93d6f28beca4c8f3efa0a232be2065f2

    • SHA512

      90580ba15d1be83b0bdb70dddad98a2dac889a07516c9a1df395ab47fa636eb51f85a1ac44e1fa7f6ed36abab5c7a947f3545a206fc58cc124353d93c6912dab

    • SSDEEP

      24576:rCnDVjA+pvEvFwkVe8i7BxxbHFhg+67hcM9HChISntz9r:QdqvVkrh+7/Qh1br

    Score
    1/10
    behavioral9

    • Target

      Payload/prod-rogers-advocate-enterprise.app/Frameworks/MCLocalization.framework/MCLocalization

    • Size

      123KB

    • MD5

      e9cd30267bfd78224985bc8d3db27f10

    • SHA1

      4b4aee15a79a5d50b5add17ab2e7ae9c3a291816

    • SHA256

      3a2f453138193cf70cc1a3cb57633de531413b9da543296e5025602e67558d04

    • SHA512

      c2bea8b7cd481ed491d0e8e33ae240714c07447f2c3110dc3cc442f41330a0e5d37a10c71a9b9b7dd7c701633aa1b08831f873997237d5da6e7c16c760c5bf52

    • SSDEEP

      1536:rBEHJlA9Nt2MLtPdjHv1C7YfpHTwCer0meEhbLjpieS+8:yAUeENj

    Score
    1/10
    behavioral10

    • Target

      Payload/prod-rogers-advocate-enterprise.app/Frameworks/Mantle.framework/Mantle

    • Size

      191KB

    • MD5

      d6406480711891b1b3c27b9ca2221db2

    • SHA1

      d0a8cf960a1d8b64c88837a4fec105833a361f8a

    • SHA256

      426b12a44422f62fdf3026b1bcdb6e9da0161f87960230bba080f818472f0148

    • SHA512

      cee24be8d70cca80c64a6f18257338cb53647c924a96c78468d238d3d4f99e13ba446584d1b55db9e168194bd7de7f0788fbaaed164248befbcf1ee6a5391289

    • SSDEEP

      1536:BfFmtgo1gfko4Mvp8CDlK+Z9pZNLRS9F+tVhlLYBiI3v5NNv+CobJT:fmj94LZpN/t5LYBiI3v5T+CobJ

    Score
    1/10
    behavioral11

    • Target

      Payload/prod-rogers-advocate-enterprise.app/Frameworks/OMGHTTPURLRQ.framework/OMGHTTPURLRQ

    • Size

      112KB

    • MD5

      eb3c79acdafbdd09b43deef511e877e0

    • SHA1

      c2b26c0c50b1f88a9f6779cc4cb4b8c6e8ecf995

    • SHA256

      77b60cee6fc632080e3b0ee3476ee9aa9715dc6cbe5a23f3aea6cef60e1afd67

    • SHA512

      d99475161d8f8f0c9ae7b4ae6c6227c4e56c8743021d7031488348ae362496ce1d4ba1d10d635a1beddf5b2c7ede3f1bfcdf632b2515dcad08e00a9a715bbc75

    • SSDEEP

      1536:tlLp0ECVe0Af+FsiQIASA19a3rzAP8rCDiGlOX:t9pNSE0YO

    Score
    1/10
    behavioral12

    • Target

      Payload/prod-rogers-advocate-enterprise.app/Frameworks/Reachability.framework/Reachability

    • Size

      96KB

    • MD5

      ac452b590e5982223749c55c7c6ed952

    • SHA1

      0c819cdccebb9ddefb545744967a95a538f9381a

    • SHA256

      000a586e04b2b5e0e40534620955935b96a6f5b45fe4ce336aad2036dff76ff2

    • SHA512

      40f12b68d1b9a4f4286c42cdd8f18c0b63fb6601bd477b908d261cc1aac323b57ee3d899aa0c7b70000e64e46991a077be70b8b8a5d33d53a4731e758874d2a4

    • SSDEEP

      1536:NfhPAhMs7KBHF152XZ/m9IkETvKF0rBs1Mrw:3UTvK

    Score
    1/10
    behavioral13

    • Target

      Payload/prod-rogers-advocate-enterprise.app/Frameworks/SHSPhoneComponent.framework/SHSPhoneComponent

    • Size

      128KB

    • MD5

      f17e7c4e5ff77face9d8e10967a16ec1

    • SHA1

      84ba94035674f38575017acbb9ead3964ca10728

    • SHA256

      60a6bf49fcf985a5e6cb15d5e08e070cf912a0d02a9cc43e27fed03f5f9486cb

    • SHA512

      b5d69822556d8e13e30fb70fd6ca2e988eaf604b1a38954f3740f1e9f339ebc033f35b4a053a97162b5d6f27643a749ac5293880ccbf32b9dc922036d7ed8b8a

    • SSDEEP

      1536:m3q9dhjfLuWYODm9QDzYOW5fnago/G4phCL0UklNTEL:fxI6lNT

    Score
    1/10
    behavioral14

    • Target

      Payload/prod-rogers-advocate-enterprise.app/Frameworks/SSDataSources.framework/SSDataSources

    • Size

      212KB

    • MD5

      0368fe64e30b2e50c71250446facb807

    • SHA1

      d0885de00b884553a3be7a959fa69aac7e398d40

    • SHA256

      cde2a0c2b379e68f30db36af270ba3e1d2da1b784272def1d1b58008cd07f3e3

    • SHA512

      7e4160c453b6d9c0bb45c19ac721ef3feb4e0c40cd0617de061b55bd7e1e75cc19f77310009b3f5c1c2b6704868d439b1464e4eb52559b0be6791e02cca7adb8

    • SSDEEP

      1536:9/GFvW4nt/2sFEUcT/N+5vW3MW0wqyMpRKxMQwBbipyKteVqbRGn/vTVDJVUByfc:9/G4SKcnxcYyiR5htSbig0Nfv

    Score
    1/10
    behavioral15

    • Target

      Payload/prod-rogers-advocate-enterprise.app/Frameworks/SSKeychain.framework/SSKeychain

    • Size

      116KB

    • MD5

      b234d40ba95f6ea0e07a65ddcb4485f9

    • SHA1

      704630e8e410a866692e49db3f0290e075d25fdf

    • SHA256

      3a674798a45d8ce973524dc4d3fe75f3d21b595c8e4b8760711ce86b7a94f2d9

    • SHA512

      a4853d4c706d915cc64756f88100a44dce9f1e4a15a538a186d5891c6be8b944b7b6ffebc94e8ba3460eb867df14f72ad69e95a76246a40a63881d69bbd0820c

    • SSDEEP

      1536:kkAXYMKhfVgiOdskTxCsvO928GeJ/ROyI+ATxW9oajVqHW:z5ZKxWR

    Score
    1/10
    behavioral16

    • Target

      Payload/prod-rogers-advocate-enterprise.app/Frameworks/SWRevealViewController.framework/SWRevealViewController

    • Size

      205KB

    • MD5

      558d721b3fb49f45b33aa052ff34afa4

    • SHA1

      98797f7c0f6764fc99c7093e6f967896ef1ec818

    • SHA256

      521bc729590c2669279ad6eae206003ee93e202762b4ce0ab699223dee00457e

    • SHA512

      e2c1c78816a040a8f403a0f55d7a15de0a3a15f2a3e17ba863b7a04f31704f6507c7e4805ffdb096ceda91fc80184e10504678f197b71d1434abd56bf72baf63

    • SSDEEP

      1536:wCLSgRvAvZZWexBJoBUc2KgDWiacHQx/WjhwYM5e9dCc4w0uHII375rxGV55ZDRS:nUdoGn74p8B1r+Zoz

    Score
    1/10
    behavioral17

    • Target

      Payload/prod-rogers-advocate-enterprise.app/Frameworks/Sidecar.framework/Sidecar

    • Size

      146KB

    • MD5

      ad044a2a3f2bc1f5562583648b4a8faf

    • SHA1

      8589b0bc11dc9669f65af64cd7b26aa469423799

    • SHA256

      19b8fe23ca445dbc0803685cca107ef5a746b57d2ab5674e652a2d9500ddc262

    • SHA512

      147a9ad783b1a80fa81c06451876c3f235779cfc444608dbfdd867277bcebb40eee92dc96ee7c787828bf31695a4ce9a1b1f60f4636c6bf5e1040df836c7ac0b

    • SSDEEP

      1536:wnUwRhxBSkxtP8lsNk91IfNhZ+WJvMF2Po4sHTdB6Ss0JKgPZljjxzP2HsXDWQRE:2XlTtdu

    Score
    1/10
    behavioral18

    • Target

      Payload/prod-rogers-advocate-enterprise.app/Frameworks/TPKeyboardAvoiding.framework/TPKeyboardAvoiding

    • Size

      126KB

    • MD5

      9ceadacaf39f7d77fef8ca00f990cf3b

    • SHA1

      9b0ece10ed81061842407a7c815041ef645b06a2

    • SHA256

      7cf5025a2da07e861d0d39bb342d356da738b0d190c6f65a9ca44d9378eb3bb0

    • SHA512

      4f83aae7534fa4de7fa0adffd0edc662c615712d23a963b79baceb66c715a4c137bdc00bc7902e7a92a1687d08f2078cb767ac389011a17dfda74c57d905325c

    • SSDEEP

      768:8fANUGpRQlSFFwpiDe93bVKHeY5O4F2ua6/Wn87XDMI2fqd5cl0Vq8W:ZUGpmlSF6pMWPYFVuHI2fqd5clD

    Score
    1/10
    behavioral19

    • Target

      Payload/prod-rogers-advocate-enterprise.app/Frameworks/UITextView_Placeholder.framework/UITextView_Placeholder

    • Size

      110KB

    • MD5

      68fd3237620bed4f62b346dbce0723df

    • SHA1

      8d20bda2e04e2b529b76110de63763201659f94c

    • SHA256

      31fb2bf9e397f0c57beaa95a5cd44ba81ae36a12c9930a6310d82a51ca0894f6

    • SHA512

      fc74a88ec5c71fa16310d66786b9288fc6d03b0c9bd091cbe6a83fa9de48c397fbf64580d3add3fd67d9f4d7a108385ebc494139063f1af9ef96f2a2b6c58561

    • SSDEEP

      1536:Wo8ih5Dy4ErqjgZiEIEMP7Ie1vlEVxZp5UdFsD:WhVPim

    Score
    1/10
    behavioral20

    • Target

      Payload/prod-rogers-advocate-enterprise.app/Frameworks/UIView_Borders.framework/UIView_Borders

    • Size

      94KB

    • MD5

      a0922c39aa749a1be600bb3d26d96a78

    • SHA1

      ae2926553e44e0fd217bd61665b9ad304521b15f

    • SHA256

      74590e46c4f367b0f6d511116ac4cdd32f9cee023920ad47d3f201dbf272834c

    • SHA512

      8d15b7c72f45eedb9152c574f52c6d91b4e274c214c8cb46a5d2c444535ecbe6779468391a870d2909a8a1681c17c898147d2dc08e6588b28dc2232eaaa7747e

    • SSDEEP

      768:Qd4RFwtiXD0VGXh8wWjK84uHDZvXeh6cI10M8qD8Ph8:YMwtiXD0VGx8wWjK84QZvOhIuM8qwJ

    Score
    1/10
    behavioral21

    • Target

      Payload/prod-rogers-advocate-enterprise.app/Frameworks/libextobjc.framework/libextobjc

    • Size

      121KB

    • MD5

      bcf865bd910db9e6c84f81b057912a98

    • SHA1

      aaa4ec341ff0e6f878c0b412f7c1facca2ccf72d

    • SHA256

      505458c6e6080a3dcac9c2d8d3569dc95132245172d54db1a86fad0b2b098a6c

    • SHA512

      dc0283af8f0892d1a9a908f47f69275ba28a26fad447c5495a7a9e8007aa324ef05db6928830214ddcb778541ec4212c64ea5693e41b4f9754f2695f3021c18c

    • SSDEEP

      1536:VDX51LFRMYu69i3GfqdU6AQ3zkAyWFsb2k1oe1Gei112KTLPQ:Xes2kWe1GeiuKTLP

    Score
    1/10
    behavioral22

    • Target

      Payload/prod-rogers-advocate-enterprise.app/Frameworks/libswiftCore.dylib

    • Size

      4.1MB

    • MD5

      f5456d6d48cfab13b1c8dcd50fd45902

    • SHA1

      c729d90ffd15360c2993e7a2b228ebf9f3a33f47

    • SHA256

      f6dd1e04360d02d0bad65329803fd59e16b35e2554fe038732e1eb32968eb07a

    • SHA512

      407affa87b2d414f264dae7cc906e551c3dff6b6c7ec4d207439d5e2fc98160fca490b3324f6935a974cf8ac72a05d7774afdf22b9eb96840c1345186a0ccbb2

    • SSDEEP

      98304:Cwr/ATEIb8FWrHbdfwFPqOx3AoaaPhvffkESUyGnPHg:NAT38XqOx4

    Score
    3/10
    behavioral23

    • Target

      Payload/prod-rogers-advocate-enterprise.app/Frameworks/libswiftCoreFoundation.dylib

    • Size

      71KB

    • MD5

      7c74bc85ab60ec28d70e4d2087e0bf45

    • SHA1

      6a6df632451a2d31fec44eebe3b24f8caa898a81

    • SHA256

      bbc1f0b2df59e19779c8076f6b4e2c2ee0b8876080cbdd4f941ddc8d9b186feb

    • SHA512

      71491fcadd63b65f4cdd2918d848e782385441040ddfaded29ac0de661dda34bab85e634a0b01ae23935ca9bb8dc2a57710c54a66f23c16e004123a01929469c

    • SSDEEP

      192:2OVgh6dAtEbC11S1tJIx8P09BUcYoZT07c+a:2Oe+bCs/28yu37Ra

    Score
    3/10
    behavioral24

    • Target

      Payload/prod-rogers-advocate-enterprise.app/Frameworks/libswiftCoreGraphics.dylib

    • Size

      140KB

    • MD5

      d92017c18b997b9623f4ce206c4d0296

    • SHA1

      5df3a4b1e8f143c480cc946899d892bf57fc53dc

    • SHA256

      af5da69fa3caadd711d809b6f4b6e290b0e55431c4ae830c7dece158de6c9310

    • SHA512

      70118310347f4b031d8aec6a3c37eec3708c9be2399c240dfc7a214de3d1e51a0e134bd87657f79213a17e96805c7d92eb41e09c26cfa89cba85114e0e330f3e

    • SSDEEP

      3072:Fk6dCg+GcSGbdzwevmFgPCWHQE6+JdVv:FkgCg+ZSGbdzXPr

    Score
    3/10
    behavioral25

    • Target

      Payload/prod-rogers-advocate-enterprise.app/Frameworks/libswiftCoreImage.dylib

    • Size

      71KB

    • MD5

      3f5374aaab563bcd786e16bd1cd4a4b6

    • SHA1

      58afcc7ebab2f9ecdb8e91130657dca542bbdccd

    • SHA256

      2e535bf60d61846d39bc71bf03c68d0b3c529882f2e357698185cd69dd45dc30

    • SHA512

      7bc9c686884710be24457e2025f90d21805654f203deb096fb959c9b04aed12996cdb6ae5189de6b28a4237f7e7dad751b4cd4dbae946cb49fb7b8cd007794f8

    • SSDEEP

      192:wGiXsowvC+XvxMDC8FN2kiXdW4JIx8P09BUcYoZb:wGigq+/wu928yu

    Score
    3/10
    behavioral26

    • Target

      Payload/prod-rogers-advocate-enterprise.app/Frameworks/libswiftDarwin.dylib

    • Size

      101KB

    • MD5

      0b134a0ec4e50370c14e17cfaebbdfae

    • SHA1

      29996e10c958d5e22043e4a67d43476d4a2bb779

    • SHA256

      7458b79f47f152f897ee114412729c46124b1eb48b14d71e6581d8094f806d55

    • SHA512

      f60118352bac66cadced5fbd0a086c32d07824e2e009ba676f485d621c46719c1972faa19fae7655b9bf1a9b99ab3e59f74377c31c537b3bbc518d4258993814

    • SSDEEP

      768:mClQ42riOlzKhENmQTydv0gJ8CcbkqHdAncKKszy09M5/LOZHqVD4yc8U:CbVKhENmQTyd0/HecYy293

    Score
    3/10
    behavioral27

    • Target

      Payload/prod-rogers-advocate-enterprise.app/about-en.html

    • Size

      4KB

    • MD5

      2f2439b8b48e20ccf737e4a36d0ccbba

    • SHA1

      c8499c06073f83a66810e359ce35e7b83e0ef035

    • SHA256

      8aa435bb4033c2a17eb73fc03ff0fe3a997696887f6c5f33e1c2993171cbc695

    • SHA512

      7945ddf2f3ebc71670f2df533e23ebe43f249b453500f42914aff8fb9c5308d15e56949557ae7b6711f2eec72838e0e2c22b00892bba71c4251a851bb42e8a8a

    • SSDEEP

      96:2LIww37hHfQE737eMb371skJ3BPPVL1C3cUD24ux1kev4C9tD:2LIwwLh/QE7LeMbL1DJ3BPPQcUyVx1kM

    Score
    1/10
    behavioral28

    • Target

      Payload/prod-rogers-advocate-enterprise.app/about-fr.html

    • Size

      4KB

    • MD5

      dd09c28f2abf7fb938d0f17575657b3f

    • SHA1

      ea765edb0eda6f5720448577b83a8d2500ea398d

    • SHA256

      e200a9effef2727d1f8baaa750f8b324a69e4e056bdf9ffaf73ca9e84520eb2f

    • SHA512

      31aaf152d2db7960409b9d0441a07ea197fc25615f7d8b575baf65c931b543926d698b731a6475fb2ab9d0569ae3b17e62365377aaa68088dd00316c9e0c364f

    • SSDEEP

      96:2LIww37hHfQE737eMb37ykJ0VB/idHCLjAnctkMf8+zoJgwrOfoHwaC8PD:2LIwwLh/QE7LeMbLdJaBbLjdtkMU+Igi

    Score
    1/10
    behavioral29

    • Target

      Payload/prod-rogers-advocate-enterprise.app/jquery-1.12.4.min.js

    • Size

      94KB

    • MD5

      4f252523d4af0b478c810c2547a63e19

    • SHA1

      5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb

    • SHA256

      668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404

    • SHA512

      8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479

    • SSDEEP

      1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV

    Score
    1/10
    behavioral30

    • Target

      Payload/prod-rogers-advocate-enterprise.app/prod-rogers-advocate-enterprise

    • Size

      608KB

    • MD5

      8020d6a0a511ab2fb9a08fd478a40e51

    • SHA1

      f897ddcda35bdb10522a53284da3136392bb05c1

    • SHA256

      e1172415dbb83c3c75415f7c5df4f5be7e4859b0b0db5dd86e0a5dd4b266ad9b

    • SHA512

      0cde3c9d62cd042fea928aa2d1a2484aa62952666de4e67c165d28a597ed4543abcaed87f4760c5eba025396ce708d87eb05d381fbf595a6dd013659f1405f8f

    • SSDEEP

      6144:devJm8lPmKuI1dbu58LO6pD8WYuYW6ZlQmRZRQLAbABkn2UW549pC7X8EC1YO:k08QFIH/Oy8F2mRZRQLAbABkn2Ur9gO

    Score
    1/10
    behavioral31

    • Target

      Payload/prod-rogers-advocate-enterprise.app/readmore.min.js

    • Size

      4KB

    • MD5

      2611fe08e48dcf93c60998a5c536649b

    • SHA1

      be9ba87c8b17ff4bd4f3881de214a1895fe28817

    • SHA256

      ca0cfb44f264240f4632457fd572a22b91847de9d739d9048f6ca18bc2d18a95

    • SHA512

      1f32bf28349a55f75e1fc0329e5a01f2e71e0c44ac7804aecb2fed394ff67ccde50c9950376f3dc99e94b01f69ec4151a469c3460e3da7750a19f13bba5af656

    • SSDEEP

      96:OLnmMscfPO0o7mNJWzqWHCqHtq1q5WwjnG5qz:anY6PnoajWznHC+t4gWw7G52

    Score
    1/10
    behavioral32

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

3
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

6
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks